This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
File:                     _gG0rfO5SE6VdhmUdLIbtCXgWvI.mft (raw, json)
Hash identifier:          /9ijn9X3mr0vG+9dbmbjZSfvav7glcgfDh/WMzmhIBM=
Subject key identifier:   9A:EB:47:19:2C:77:C5:8F:1B:60:01:C4:DB:65:4E:45:6D:1F:B3:6F
Authority key identifier: FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2
Certificate issuer:       /CN=fe01b4adf3b9484e9576199474b21bb425e05af2
Certificate serial:       019993A1113860283FB1FC398131CFB4783D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft
Manifest number:          16A8
Signing time:             Mon 29 Sep 2025 04:00:30 +0000
Manifest this update:     Mon 29 Sep 2025 04:00:30 +0000
Manifest next update:     Tue 30 Sep 2025 04:00:30 +0000
Files and hashes:         1: _gG0rfO5SE6VdhmUdLIbtCXgWvI.crl (hash: ox8Z0yb2NtrVzVjzvAGUfS+7AyyPF3+hX9nuAH46DDg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:93:a1:11:38:60:28:3f:b1:fc:39:81:31:cf:b4:78:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe01b4adf3b9484e9576199474b21bb425e05af2
        Validity
            Not Before: Sep 29 04:00:30 2025 GMT
            Not After : Sep 30 04:00:30 2025 GMT
        Subject: CN=9aeb47192c77c58f1b6001c4db654e456d1fb36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:d1:6f:a7:21:a8:17:1b:5c:cd:89:e5:5c:
                    98:75:1c:65:1d:4c:4d:9d:f2:af:10:06:23:d4:48:
                    1a:3a:6a:44:57:db:80:2f:1c:ee:83:00:04:69:94:
                    7d:2c:0e:5c:c8:5f:1b:ae:44:60:64:67:dc:39:41:
                    dc:7b:8a:bd:1c:de:0f:9f:ec:4c:9b:af:29:6a:77:
                    e2:5d:2d:17:3a:c8:41:08:db:26:0f:32:8d:eb:cc:
                    f6:6a:3e:12:1e:30:27:85:67:a6:b2:0a:e5:31:48:
                    f6:1f:75:07:38:c1:f8:43:ff:94:43:3b:50:4b:d7:
                    41:f6:8e:b5:05:8c:f1:78:8a:f7:92:e4:08:68:a7:
                    48:c7:08:21:17:d5:76:91:c0:bf:12:41:fa:2d:34:
                    df:92:ed:64:02:9a:11:73:9a:46:05:37:bb:46:9f:
                    93:79:f8:ac:c6:53:fc:f7:9d:b5:06:41:e3:e9:76:
                    de:d6:be:e8:c0:fe:de:0a:94:13:88:de:2b:69:e4:
                    4d:a5:52:8a:70:5a:0f:67:4d:93:a8:49:76:f1:8f:
                    af:d1:0b:2f:25:1c:4c:57:fc:48:63:b3:56:bc:26:
                    16:43:c8:98:d0:d7:cf:16:ca:1d:59:00:46:fa:82:
                    a6:8e:76:dd:66:37:67:a5:f8:83:9d:90:74:24:13:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:47:19:2C:77:C5:8F:1B:60:01:C4:DB:65:4E:45:6D:1F:B3:6F
            X509v3 Authority Key Identifier:
                keyid:FE:01:B4:AD:F3:B9:48:4E:95:76:19:94:74:B2:1B:B4:25:E0:5A:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gG0rfO5SE6VdhmUdLIbtCXgWvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d87266-1da4-4446-be34-f94743b26537/1/_gG0rfO5SE6VdhmUdLIbtCXgWvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:96:ce:35:2a:2e:96:26:f6:7d:98:53:59:50:cd:1b:be:
         30:1a:c6:c0:38:c3:56:a1:7e:bb:93:9a:94:77:77:8e:01:fd:
         92:06:4d:b8:5a:f7:2f:5e:e5:bb:eb:41:14:a4:aa:94:7d:16:
         54:7e:af:90:86:9f:5d:2d:c4:30:f5:02:5f:ca:b2:be:95:6b:
         df:a9:7c:e5:0e:a4:d8:f8:cc:84:ec:53:64:81:69:55:e9:66:
         f1:a3:4b:d9:e4:48:51:06:dc:3a:49:79:eb:16:8f:79:41:40:
         e3:58:19:90:ba:d2:79:7c:ce:17:b8:69:85:2b:bf:9e:0b:37:
         2c:86:18:88:53:88:e8:22:3c:5d:45:c0:ae:13:f8:0b:d3:fd:
         77:51:1d:44:32:3a:98:24:58:3f:38:de:b3:bd:02:3c:88:39:
         f4:b7:a4:79:08:be:64:9b:0f:2f:40:9a:76:fb:15:44:21:1d:
         97:e6:91:49:2a:9f:39:21:13:b0:54:15:1d:dd:22:b5:3f:1d:
         5b:70:17:06:c5:b1:00:a6:54:4c:0b:93:79:93:21:6b:5d:dc:
         0e:59:d3:c9:73:dd:f5:ca:96:a2:03:61:ed:1c:68:50:d9:14:
         b1:d2:45:c3:b8:9b:cf:3d:d8:c3:d0:56:28:53:42:42:36:bd:
         c2:47:43:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:54:01 2025 by rpki-client